Security researchers at SecureMac have identified a new Trojan Horse targeting computers running Apple Mac OS X. The malware, referred to as OSX/CoinThief.A, spies on users' web traffic with the aim of stealing bitcoins. Several users have reported that their digital currencies have been stolen.
According to the researchers, the malware was hosted on Github under the name “StealthBit”, and presented itself as an application for making bitcoin payments via Stealth addresses.
A link to the app was also posted on Reddit, urging users to download the malicious app. A Reddit user reported that he fell victim to the malware, which managed to steal 20 bitcoins from his online wallet (worth approximately $10,000).
The project found on Github included the source code of the application, as well as a pre-compiled binary file. The researchers found that this file was not identical to the copy produced from the source code. Users who installed the pre-compiled version of the application may have been infected with the malware.
The malware, which is installed as an extension to the Safari or Google Chrome browser, is designed to search, locate and steal users' Bitcoin Wallet credentials.
At the time of writing, the malware has been removed from GitHub.
